On Thursday 22 May 2008 11:27, Kristina Anderson wrote: > How to do this? Can I call the second form submit programmatically at > the end of the first form submit in PHP? Or with Javascript on the > second form submit call the first form to be submitted?
I would recommend the former, because that is the only way it will work if Javascript is disabled. Even if it is enabled, one should never "trust" the client browser to do the right thing (or to not be maliciously tampered with) - so in the JS scenario, could an attacker submit an order to your server without actually providing payment to Paypal? seems quite possible. Using PEAR HTTP_Request it is quite easy to submit a form from PHP. So you could pass along the data from the form to Paypal after you validate the order, and then make sure Paypal returns an OK before confirming the order. Paypal even has an API for this. _______________________________________________ New York PHP Community Talk Mailing List http://lists.nyphp.org/mailman/listinfo/talk NYPHPCon 2006 Presentations Online http://www.nyphpcon.com Show Your Participation in New York PHP http://www.nyphp.org/show_participation.php
